$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: Vk/hM5zUJ3chlJzrVcN+Ceqznby0u24hzSWZwu7vcks= Subject key identifier: 1A:E2:A2:1A:D3:CD:53:14:E3:6B:00:72:5C:DF:A8:7F:8F:A3:52:94 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0F6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F4A Signing time: Mon 12 May 2025 17:32:29 +0000 Manifest this update: Mon 12 May 2025 17:32:29 +0000 Manifest next update: Mon 19 May 2025 17:32:29 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: yPZwWu0QAB+qdQZk1oM1PqB3X1gHUxC3vlo3a+LysEM=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: wNl2vPAfQOmVBCkud9vffEnTL87IbN3lfDYFsp2wc4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3946 (0xf6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: May 12 17:32:29 2025 GMT Not After : May 19 17:32:29 2025 GMT Subject: CN=682230ad-bc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:31:2d:d7:d9:03:d7:65:0a:a6:a5:79:94:0d: 60:2c:a8:cb:ad:c9:7f:f2:eb:47:a1:98:48:07:aa: f4:0e:45:f3:03:3c:54:c0:fb:69:54:e6:84:8d:05: d9:45:ad:a2:84:72:0d:3c:de:63:2b:2f:4e:1d:2c: fc:d5:f1:8f:8c:f6:d7:1f:81:46:28:65:3c:4c:fa: 3c:6e:34:8f:80:4d:6f:53:9a:ff:bb:6a:52:16:0f: eb:8b:60:b9:b8:24:aa:0c:8b:14:f0:96:45:a2:0b: bf:80:6a:6b:71:db:3c:9f:38:6d:05:0c:da:8c:75: 99:a9:b8:1d:0d:96:9c:19:ce:fa:a5:c5:25:18:08: 33:0b:87:94:5f:f7:b7:37:d4:f0:79:88:bc:bc:2f: 0c:05:b0:b3:8e:4f:56:ab:6a:5b:b1:cd:ed:ad:ad: 3b:d6:bf:35:90:6f:29:4a:88:cf:c2:da:f3:0d:4f: 51:df:f4:ed:17:d6:aa:63:9a:ee:fe:6d:6d:a7:df: 56:0e:d6:50:01:ac:1b:4f:93:fb:f7:9f:f0:e2:c6: 26:df:40:93:5f:72:fc:45:d7:bf:ba:1c:9f:67:97: 53:7e:41:48:4e:fd:61:ef:f4:b7:fa:50:a3:a8:08: ae:46:b2:a0:72:a0:bf:05:43:c1:90:da:7a:a4:f6: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E2:A2:1A:D3:CD:53:14:E3:6B:00:72:5C:DF:A8:7F:8F:A3:52:94 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b0:2f:97:e0:0a:f9:d4:a9:c9:5e:f3:ed:12:94:3d:39:08: b0:1d:43:fe:25:15:38:0f:1a:80:74:97:a5:b0:97:47:bd:fd: e1:2b:05:c8:de:9b:9f:bf:5f:77:aa:f0:0b:72:cb:d7:19:cd: 0a:28:ed:37:22:c4:69:b8:69:64:a8:9a:f9:05:83:76:da:e1: 5a:da:09:f2:69:87:c6:f7:35:a7:83:0f:9d:4a:03:81:50:ff: dd:f0:9f:78:3a:fc:be:79:ae:48:8c:55:aa:a6:0f:b8:e7:30: a2:28:d5:99:58:2a:a1:40:8d:45:4b:20:d9:23:89:e1:dd:2f: 88:ef:67:f0:0f:30:7f:81:c8:6e:70:93:d2:65:01:39:85:ec: 59:d4:44:de:e3:83:c9:03:9b:09:03:f8:c2:27:5d:f9:3b:fa: 24:ea:0d:35:55:52:90:f4:c4:f5:7d:69:4f:94:8e:61:1e:ab: 8a:f1:94:db:05:46:5f:ec:ed:ad:5a:c2:01:3f:24:1d:63:4b: 51:78:de:7c:41:7a:96:e8:26:20:b9:dd:cf:33:11:b1:33:88: 31:79:ac:c3:5c:5e:2d:cd:6a:fd:6a:19:61:f0:6f:f0:fa:2c: c0:1d:25:30:7d:f0:7c:e4:ec:d8:85:2e:80:ae:e0:e9:74:26: 20:de:1d:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwNTEyMTczMjI5WhcNMjUwNTE5MTczMjI5WjAYMRYwFAYD VQQDEw02ODIyMzBhZC1iYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzEt19kD12UKpqV5lA1gLKjLrcl/8utHoZhIB6r0DkXzAzxUwPtpVOaEjQXZ Ra2ihHINPN5jKy9OHSz81fGPjPbXH4FGKGU8TPo8bjSPgE1vU5r/u2pSFg/ri2C5 uCSqDIsU8JZFogu/gGprcds8nzhtBQzajHWZqbgdDZacGc76pcUlGAgzC4eUX/e3 N9TweYi8vC8MBbCzjk9Wq2pbsc3tra071r81kG8pSojPwtrzDU9R3/TtF9aqY5ru /m1tp99WDtZQAawbT5P795/w4sYm30CTX3L8Rde/uhyfZ5dTfkFITv1h7/S3+lCj qAiuRrKgcqC/BUPBkNp6pPaYPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBriohrT zVMU42sAclzfqH+Po1KUMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzsC+X4Ar51KnJXvPtEpQ9OQiwHUP+JRU4DxqAdJelsJdHvf3hKwXI 3pufv193qvALcsvXGc0KKO03IsRpuGlkqJr5BYN22uFa2gnyaYfG9zWngw+dSgOB UP/d8J94Ovy+ea5IjFWqpg+45zCiKNWZWCqhQI1FSyDZI4nh3S+I72fwDzB/gchu cJPSZQE5hexZ1ETe44PJA5sJA/jCJ135O/ok6g01VVKQ9MT1fWlPlI5hHquK8ZTb BUZf7O2tWsIBPyQdY0tReN58QXqW6CYgud3PMxGxM4gxeazDXF4tzWr9ahlh8G/w +izAHSUwffB85OzYhS6AruDpdCYg3h0E -----END CERTIFICATE-----Generated at Tue May 13 12:27:15 2025 by rpki-client